Add role and permission guard decorators to some existing routes

[cherylli]

Description

Add role and permission guard decorators to all routes except sprints, resources, and part of ideations, as I would like to look at adding additional permissions for these routes.

TODO - for future, not in this PR
#112 (comment)

Issue link

Fixes # (issue)

Type of change

• Bug fix (non-breaking change which fixes an issue)
• Feature updates / changes
• Tests
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• This change requires a documentation update

How Has This Been Tested?

Checklist:

• My code follows the style guidelines of this project
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing tests pass locally with my changes
• Any dependent changes have been merged and published in downstream modules
• I have updated the change log

[siasktv]

Wow, this look like a massive amount of work. All tests passed!

[timDeHof]

do we have tests for the guards?

[cherylli]

do we have tests for the guards?

yes we should have e2e tests on each endpoint for the permission, but I think we might need to go through each of them and add more soon, as i'm thinking to add more permissions

But I don't think we have tests for the role guard

[cherylli]

I decided to only add role check for forms (also did some refactoring while i'm there) because

• ideations: will need to redo to match our current format/standard, too much for this PR
• teams: has no tests yet so it would be another PR itself to add the tests

Resources, sprints, users endpoints I have not touched so I don't intervere with the tests Josh, Curt, and Piero are working on - will need to add decorators to them - also because I want to add more permissions for these endpoints

[cherylli]

back to draft again - I want to add missing swagger docs to the forms endpoints

[cherylli]

ready for review again

changed

[timDeHof]

I like how you moved the utility functions to a separate file. We should properly do something similar to the function in the other test files.

[curtwl]

Successfully gave 403 for non-admin logged in user

[timDeHof]

great job! looks really clean.